Well-known security flaws go ignored